Hosting Provided By

Mailing List Archive For snort-sigs@snort.org Jul 2003 By Thread

[Snort-sigs] Snort rules am attaching the files Neal Timm (Wed Jul 30 2003 - 22:09:11 EDT)
RE: [Snort-sigs] DCom RPC attack response sig Esler, Joel Contractor (Wed Jul 30 2003 - 12:12:22 EDT)
RE: [Snort-sigs] i've recieved your help Matt Kettler (Thu Jul 31 2003 - 15:08:35 EDT)
[Snort-sigs] Re: Snort-sigs digest, Vol 1 #658 - 11 msgs Zultan (Thu Jul 31 2003 - 06:23:51 EDT)
Re: [Snort-sigs] snort-rules with resp Erek Adams (Thu Jul 31 2003 - 00:27:32 EDT)
RE: [Snort-sigs] i've recieved your help Moyer, Shawn (Wed Jul 30 2003 - 22:51:08 EDT)
[Snort-sigs] snort-rules with resp Alexandru Balan (Wed Jul 30 2003 - 21:56:30 EDT)
Re: [Snort-sigs] Resp Keyword in Windows XP!! Jeff Nathan (Wed Jul 30 2003 - 20:05:04 EDT)
Re: [Snort-sigs] i've recieved your help Matt Kettler (Wed Jul 30 2003 - 16:44:45 EDT)
Re: [Snort-sigs] i've recieved your help Wes Young (Wed Jul 30 2003 - 13:57:23 EDT)
Re: [Snort-sigs] i've recieved your help Matt Kettler (Wed Jul 30 2003 - 13:37:31 EDT)
[Snort-sigs] i've recieved your help qkhou (Wed Jul 30 2003 - 06:07:24 EDT)
FW: [Snort-sigs] DCom RPC attack response sig Esler, Joel Contractor (Tue Jul 29 2003 - 10:07:59 EDT)
FW: [Snort-sigs] Resp Keyword in Windows XP!! Esler, Joel Contractor (Tue Jul 29 2003 - 10:07:51 EDT)
[Snort-sigs] Signature to detect shells bound to a port Jukka Juslin (Wed Jul 30 2003 - 02:33:07 EDT)
[Snort-sigs] snort-rules STABLE update @ Wed Jul 30 02:20:05 2003 bmc(at)snort.org (Wed Jul 30 2003 - 02:20:05 EDT)
[Snort-sigs] snort-rules CURRENT update @ Wed Jul 30 02:20:05 2003 bmc(at)snort.org (Wed Jul 30 2003 - 02:20:05 EDT)
[Snort-sigs] HXDL.EXE Wes Young (Tue Jul 29 2003 - 13:03:38 EDT)
Re: [Snort-sigs] DCOM MS03-026 Alpha Rules Brian (Tue Jul 29 2003 - 12:10:12 EDT)
Re: [Snort-sigs] Resp Keyword in Windows XP!! Matt Kettler (Tue Jul 29 2003 - 11:56:25 EDT)
[Snort-sigs] Resp Keyword in Windows XP!! jthomas(at)capitol-college.edu (Tue Jul 29 2003 - 04:18:23 EDT)
[Snort-sigs] DCom RPC attack response sig Michael Anuzis (Mon Jul 28 2003 - 10:00:20 EDT)
RE: [Snort-sigs] DCOM MS03-026 Alpha Rules Paul Tinsley (Tue Jul 29 2003 - 00:57:26 EDT)
RE: [Snort-sigs] DCOM MS03-026 Alpha Rules Paul Tinsley (Tue Jul 29 2003 - 00:47:14 EDT)
Re: [Snort-sigs] DCOM MS03-026 Alpha Rules daniel uriah clemens (Mon Jul 28 2003 - 17:17:07 EDT)
[Snort-sigs] DCOM MS03-026 Alpha Rules pdt(at)jackhammer.org (Mon Jul 28 2003 - 22:54:01 EDT)
RE: [Snort-sigs] Rule: Bugbear.B Network Share Scan Tom.Mclaughlin(at)kp.org (Mon Jul 28 2003 - 19:51:38 EDT)
RE: [Snort-sigs] Rule: Bugbear.B Network Share Scan Tinsley Paul (Mon Jul 28 2003 - 19:43:01 EDT)
[Snort-sigs] Rule: Bugbear.B Network Share Scan Tom.Mclaughlin(at)kp.org (Mon Jul 28 2003 - 18:13:36 EDT)
RE: [Snort-sigs] Ignoring just one host Moyer, Shawn (Mon Jul 28 2003 - 17:25:54 EDT)
Re: [Snort-sigs] Ignoring just one host Erick Mechler (Mon Jul 28 2003 - 17:32:06 EDT)
[Snort-sigs] Ignoring just one host Gary Danko (Mon Jul 28 2003 - 16:58:04 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler (Mon Jul 28 2003 - 10:11:41 EDT)
Re: [Snort-sigs] question Matt Kettler (Mon Jul 28 2003 - 09:55:13 EDT)
[Snort-sigs] question qkhou (Mon Jul 28 2003 - 04:15:20 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler (Thu Jul 24 2003 - 20:57:42 EDT)
Re: [Fwd: [Snort-sigs] dce rpc rules] Kevin Pietersma (Fri Jul 25 2003 - 11:17:13 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Jon Hart (Fri Jul 25 2003 - 10:42:37 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Christopher Lubrecht (Fri Jul 25 2003 - 09:00:37 EDT)
[Snort-sigs] sid 882 false positives Jonathan Norman (Fri Jul 25 2003 - 06:29:27 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Jukka Juslin (Fri Jul 25 2003 - 03:44:03 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Wes Young (Thu Jul 24 2003 - 20:37:28 EDT)
Re: [Snort-sigs] dce rpc rules Dale L. Handy (Thu Jul 24 2003 - 18:31:14 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler (Thu Jul 24 2003 - 16:27:27 EDT)
Re: [Snort-sigs] Signature for scanning SSH versions Hugo van der Kooij (Thu Jul 24 2003 - 13:38:27 EDT)
[Snort-sigs] Microsoft Security Bulletin MS03-026 signature Kevin Pietersma (Thu Jul 24 2003 - 11:13:10 EDT)
[Snort-sigs] Signature for scanning SSH versions Jukka Juslin (Thu Jul 24 2003 - 05:19:55 EDT)
Re: [Snort-sigs] MS Exchange rule Hugo van der Kooij (Thu Jul 24 2003 - 01:33:21 EDT)
RE: [Snort-sigs] MS Exchange rule Schmehl, Paul L (Wed Jul 23 2003 - 18:25:52 EDT)
Re: [Snort-sigs] (spp_stream4) STEALTH ACTIVITY (unknown) detection Matt Kettler (Wed Jul 23 2003 - 16:56:52 EDT)
Re: [Snort-sigs] MS Exchange rule Wes Young (Wed Jul 23 2003 - 16:36:14 EDT)
RE: [Snort-sigs] MS Exchange rule Robert Reid (Wed Jul 23 2003 - 16:33:36 EDT)
Re: [Snort-sigs] MS Exchange rule Brian (Wed Jul 23 2003 - 16:20:41 EDT)
[Snort-sigs] (spp_stream4) STEALTH ACTIVITY (unknown) detection Josh.Sakofsky(at)donovandata.com (Wed Jul 23 2003 - 16:19:08 EDT)
[Snort-sigs] MS Exchange rule Kraus, Thorsten (Wed Jul 23 2003 - 02:07:44 EDT)
[Snort-sigs] Documentation: SID 908 Darryl Davidson (Tue Jul 22 2003 - 19:11:24 EDT)
[Snort-sigs] Documentation: SID 906 Darryl Davidson (Tue Jul 22 2003 - 18:32:54 EDT)
[Snort-sigs] Documentation: SID 907 Darryl Davidson (Tue Jul 22 2003 - 18:35:54 EDT)
[Snort-sigs] Documentation: SID 905 Darryl Davidson (Tue Jul 22 2003 - 18:24:56 EDT)
Re: [Snort-sigs] how many rules are there for snort at the moment? Brian (Tue Jul 22 2003 - 14:01:03 EDT)
[Snort-sigs] Missing signature description Cliff Lai (Tue Jul 22 2003 - 03:47:31 EDT)
RE: [Snort-users] RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Donahue, Pat (Mon Jul 21 2003 - 09:43:36 EDT)
RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Smith, Donald (Mon Jul 21 2003 - 09:31:01 EDT)
Re: [Snort-sigs] how many rules are there for snort at the moment? Matt Kettler (Tue Jul 22 2003 - 13:06:40 EDT)
RE: [Snort-sigs] how many rules are there for snort at the moment? Steven Alexander (Tue Jul 22 2003 - 12:55:20 EDT)
[Snort-sigs] how many rules are there for snort at the moment? Chatprechakul Mr N (Tue Jul 22 2003 - 11:55:24 EDT)
[Snort-sigs] Rule for port 3531 Robert Wagner (Tue Jul 22 2003 - 09:46:09 EDT)
[Snort-sigs] snort-rules STABLE update @ Tue Jul 22 02:24:19 2003 bmc(at)snort.org (Tue Jul 22 2003 - 02:24:19 EDT)
[Snort-sigs] snort-rules CURRENT update @ Tue Jul 22 02:24:19 2003 bmc(at)snort.org (Tue Jul 22 2003 - 02:24:19 EDT)
[Snort-sigs] dce rpc rules Brian (Mon Jul 21 2003 - 18:19:31 EDT)
Re: [Snort-sigs] SID: 2190 Nigel Houghton (Mon Jul 21 2003 - 12:24:00 EDT)
Re: [Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Matt Kettler (Mon Jul 21 2003 - 12:12:36 EDT)
Re: [Snort-sigs] SID: 2190 Jon Hart (Mon Jul 21 2003 - 11:31:00 EDT)
Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Brian (Mon Jul 21 2003 - 10:05:31 EDT)
RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results scheidell(at)secnap.net (Mon Jul 21 2003 - 09:58:14 EDT)
Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Chris Green (Mon Jul 21 2003 - 09:05:36 EDT)
[Snort-sigs] SID: 2192 Iván Mota Alberca (Fri Jul 18 2003 - 12:44:21 EDT)
RE: [Snort-sigs] SID: 2190 Keith Pachulski (Mon Jul 21 2003 - 08:38:34 EDT)
[Snort-sigs] SID: 2193 Iván Mota Alberca (Fri Jul 18 2003 - 12:45:43 EDT)
RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Smith, Donald (Fri Jul 18 2003 - 15:17:31 EDT)
RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Klun, Jim (Fri Jul 18 2003 - 10:42:52 EDT)
RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Klun, Jim (Fri Jul 18 2003 - 10:43:43 EDT)
[Snort-sigs] SID: 2190 Iván Mota Alberca (Fri Jul 18 2003 - 12:40:15 EDT)
[Snort-sigs] Fw: SC Signature and HPING Signature james (Fri Jul 18 2003 - 13:10:55 EDT)
[Snort-sigs] help Thomas Dodds (Fri Jul 18 2003 - 17:41:44 EDT)
[Snort-sigs] SID: 2191 Iván Mota Alberca (Fri Jul 18 2003 - 12:42:41 EDT)
[Snort-sigs] Fw: SC Signature and HPING Signature james (Fri Jul 18 2003 - 12:50:17 EDT)
[Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Ôø Ð¡Á¢ (Mon Jul 21 2003 - 02:11:19 EDT)
[Snort-sigs] Why does snort use binarytree structure when reassembling a TCP stream Ôø Ð¡Á¢ (Mon Jul 21 2003 - 02:14:19 EDT)
Re: [Snort-sigs] Question Alert 1948 Rich Adamson (Sun Jul 20 2003 - 13:09:56 EDT)
Re: [Snort-users] Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Rich Adamson (Sun Jul 20 2003 - 13:41:27 EDT)
Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Michael Scheidell (Sun Jul 20 2003 - 12:07:06 EDT)
RE: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Kreimendahl, Chad J (Sun Jul 20 2003 - 01:10:40 EDT)
[Snort-sigs] yet more porn docs Steven Alexander (Sat Jul 19 2003 - 17:40:27 EDT)
Re: [Snort-sigs] Question Alert 1948 Erick Mechler (Sat Jul 19 2003 - 15:43:42 EDT)
Re: [Snort-sigs] Question Alert 1948 Rich Adamson (Sat Jul 19 2003 - 14:53:46 EDT)
Re: [Snort-sigs] Question Alert 1948 Wes Young (Sat Jul 19 2003 - 12:53:02 EDT)
[Snort-sigs] snort-rules STABLE update @ Sat Jul 19 01:21:42 2003 bmc(at)snort.org (Sat Jul 19 2003 - 01:21:42 EDT)
[Snort-sigs] snort-rules CURRENT update @ Sat Jul 19 01:21:42 2003 bmc(at)snort.org (Sat Jul 19 2003 - 01:21:42 EDT)
Re: [Snort-sigs] More porn docs Nigel Houghton (Fri Jul 18 2003 - 21:47:34 EDT)
Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Brian (Fri Jul 18 2003 - 20:42:19 EDT)
RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Eric Hines (Fri Jul 18 2003 - 20:01:34 EDT)
[Snort-sigs] More porn docs Steven Alexander (Fri Jul 18 2003 - 15:00:30 EDT)
[Snort-sigs] Documentation: porn rules Steven Alexander (Fri Jul 18 2003 - 14:49:47 EDT)
Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns (Fri Jul 18 2003 - 14:37:15 EDT)
[Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Jon Hart (Fri Jul 18 2003 - 14:02:50 EDT)
[Snort-sigs] Fw: SC Signature and HPING Signature james (Fri Jul 18 2003 - 13:32:09 EDT)
[Snort-sigs] Documentation: sid 627 Steven Alexander (Fri Jul 18 2003 - 14:14:44 EDT)
[Snort-sigs] Correction: sid 619 Steven Alexander (Fri Jul 18 2003 - 13:50:20 EDT)
[Snort-sigs] Documentation: sid 626 Steven Alexander (Fri Jul 18 2003 - 14:14:22 EDT)
[Snort-sigs] Documentation: sid 1133 Steven Alexander (Fri Jul 18 2003 - 13:34:35 EDT)
[Snort-sigs] Re: [Snort-users] Suggested Sig for Cisco DOS Vulnerability Brian (Fri Jul 18 2003 - 13:50:23 EDT)
[Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns (Fri Jul 18 2003 - 13:40:07 EDT)
[Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns (Fri Jul 18 2003 - 13:51:02 EDT)
[Snort-sigs] SIDS 1133 and 619 Steven Alexander (Fri Jul 18 2003 - 13:42:32 EDT)
[Snort-sigs] Documentation: sid 619 Steven Alexander (Fri Jul 18 2003 - 13:44:18 EDT)
[Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Kreimendahl, Chad J (Fri Jul 18 2003 - 12:34:07 EDT)
[Snort-sigs] Documentation: SID 522 Steven Alexander (Fri Jul 18 2003 - 12:17:35 EDT)
Re: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Michael Scheidell (Fri Jul 18 2003 - 10:00:37 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson (Fri Jul 18 2003 - 10:14:15 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson (Fri Jul 18 2003 - 08:30:18 EDT)
[Snort-sigs] Documentation: SID 324 Darryl Davidson (Wed Jul 16 2003 - 18:51:44 EDT)
[Snort-sigs] Re: "bad guy" tagging Grudge Mason (Thu Jul 17 2003 - 11:25:30 EDT)
[Snort-sigs] need a packet trace for serv-u/malware ftp session w/o login... Donovan Tyler {tylerd} (Thu Jul 17 2003 - 11:20:57 EDT)
[Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Compton, Rich (Fri Jul 18 2003 - 01:57:39 EDT)
[Snort-sigs] Question Alert 1948 Cathy Stallings (Thu Jul 17 2003 - 13:53:59 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Brian (Thu Jul 17 2003 - 21:32:40 EDT)
[Snort-sigs] Documentation: Sid 504 Steven Alexander (Thu Jul 17 2003 - 20:45:30 EDT)
[Snort-sigs] Documentation: Sid 503 Steven Alexander (Thu Jul 17 2003 - 20:45:06 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Michael Boman (Thu Jul 17 2003 - 18:33:57 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Grudge Mason (Thu Jul 17 2003 - 11:54:12 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Chris Green (Thu Jul 17 2003 - 07:16:08 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson (Thu Jul 17 2003 - 06:15:37 EDT)
[Snort-sigs] Documentation: SID 904 Darryl Davidson (Wed Jul 16 2003 - 19:29:38 EDT)
[Snort-sigs] Documentation: SID 904 Darryl Davidson (Wed Jul 16 2003 - 19:11:02 EDT)
Re: [Snort-sigs] Re: "bad guy" tagging Chris Green (Wed Jul 16 2003 - 07:50:53 EDT)
[Snort-sigs] Re: "bad guy" tagging (Was: Re: Regarding rule 491 INFO FTP Bad login) Martin Olsson (Wed Jul 16 2003 - 05:16:20 EDT)
[Snort-sigs] why does snort use binarytree structure when reassembling a TCP stream Ôø Ð¡Á¢ (Wed Jul 16 2003 - 02:23:03 EDT)
[Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Ôø Ð¡Á¢ (Tue Jul 15 2003 - 22:46:27 EDT)
[Snort-sigs] "bad guy" tagging (Was: Re: Regarding rule 491 INFO FTP Bad login) Erek Adams (Tue Jul 15 2003 - 15:43:01 EDT)
Re: [Snort-sigs] Remote Shell Trojan signature Matt Kettler (Tue Jul 15 2003 - 13:17:50 EDT)
Re: AW: [Snort-sigs] locate the offender/target (was: Regarding rule 491 INFO FTP Bad login) Martin Olsson (Tue Jul 15 2003 - 12:36:16 EDT)
[Snort-sigs] Remote Shell Trojan signature Jukka Juslin (Tue Jul 15 2003 - 09:29:49 EDT)
Re: [Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Jeff Nathan (Tue Jul 15 2003 - 03:39:32 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Matt Kettler (Mon Jul 14 2003 - 16:37:50 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Brian (Mon Jul 14 2003 - 16:21:56 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Matt Kettler (Mon Jul 14 2003 - 12:45:06 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt stephane (Mon Jul 14 2003 - 12:10:57 EDT)
AW: [Snort-sigs] Regarding rule 491 INFO FTP Bad login Sean Wheeler (Mon Jul 14 2003 - 11:05:00 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Nigel Houghton (Mon Jul 14 2003 - 11:17:29 EDT)
Re: [Snort-sigs] Regarding rule 491 INFO FTP Bad login Martin Olsson (Mon Jul 14 2003 - 08:52:38 EDT)
[Snort-sigs] Regarding rule 491 INFO FTP Bad login J-H. Johansen (Mon Jul 14 2003 - 07:46:35 EDT)
[Snort-sigs] Edonkey signatures Jukka Juslin (Mon Jul 14 2003 - 04:18:28 EDT)
Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Hugo van der Kooij (Sun Jul 13 2003 - 17:15:15 EDT)
[Snort-sigs] SID 663, SMTP rcpt to sed command attempt Nathan Bain (Sun Jul 13 2003 - 17:00:19 EDT)
[Snort-sigs] snort-rules STABLE update @ Sat Jul 12 01:19:44 2003 bmc(at)snort.org (Sat Jul 12 2003 - 01:19:45 EDT)
[Snort-sigs] snort-rules CURRENT update @ Sat Jul 12 01:19:44 2003 bmc(at)snort.org (Sat Jul 12 2003 - 01:19:44 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Brian (Sat Jul 12 2003 - 16:46:03 EDT)
Re: [Snort-sigs] SID 333 Matt Kettler (Fri Jul 11 2003 - 19:44:42 EDT)
[Snort-sigs] SID 333 Steven Alexander (Fri Jul 11 2003 - 14:32:28 EDT)
[Snort-sigs] Documentation: SID 279 Steven Alexander (Fri Jul 11 2003 - 14:16:02 EDT)
[Snort-sigs] Documentation: SID 281 Steven Alexander (Fri Jul 11 2003 - 13:59:06 EDT)
Re: [Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Matt Kettler (Fri Jul 11 2003 - 12:07:38 EDT)
RE: [Snort-sigs] P2P Kazaa Traffic Sam Evans (Fri Jul 11 2003 - 10:18:24 EDT)
RE: [Snort-sigs] P2P Kazaa Traffic Jacob Hurley (Fri Jul 11 2003 - 05:28:37 EDT)
RE: [Snort-sigs] P2P Kazaa Traffic Jukka Juslin (Fri Jul 11 2003 - 04:08:40 EDT)
[Snort-sigs] CAN 2002-1123 Gabriel Agatiello (Fri Jul 11 2003 - 04:00:58 EDT)
[Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Ôø Ð¡Á¢ (Fri Jul 11 2003 - 03:04:00 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Tony Lill (Thu Jul 10 2003 - 17:24:47 EDT)
RE: [Snort-sigs] P2P Kazaa Traffic Jacob Hurley (Thu Jul 10 2003 - 15:03:14 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Wes Young (Thu Jul 10 2003 - 09:09:54 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Jukka Juslin (Thu Jul 10 2003 - 02:39:58 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Wes Young (Wed Jul 09 2003 - 23:26:06 EDT)
[Snort-sigs] ICMP PING BeOS4.x Documentation daniel uriah clemens (Wed Jul 09 2003 - 12:46:56 EDT)
[Snort-sigs] ICMP PING Cisco Type.x (supposedly ios 9.x) documentation daniel uriah clemens (Wed Jul 09 2003 - 12:53:03 EDT)
[Snort-sigs] ICMP PING *NIX documentation daniel uriah clemens (Wed Jul 09 2003 - 12:21:09 EDT)
[Snort-sigs] ICMP PING BSDType Documentation daniel uriah clemens (Wed Jul 09 2003 - 12:24:58 EDT)
[Snort-sigs] ICMP PING BayRS Router documentation daniel uriah clemens (Wed Jul 09 2003 - 12:30:28 EDT)
Re: [Snort-sigs] ACID Erick Mechler (Wed Jul 09 2003 - 13:11:41 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Sam Evans (Wed Jul 09 2003 - 13:18:06 EDT)
RE: [Snort-sigs] question about content Steven Alexander (Wed Jul 09 2003 - 11:44:05 EDT)
[Snort-sigs] WEB-MISC xp_cmdshell attempt documentation. daniel uriah clemens (Wed Jul 09 2003 - 06:36:05 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Sam Evans (Wed Jul 09 2003 - 11:31:26 EDT)
Re: [Snort-sigs] P2P Kazaa Traffic Chris Baker (Wed Jul 09 2003 - 11:06:11 EDT)
Re: [Snort-sigs] P2P foldershare.com ftp connection with FTP STUFF daniel uriah clemens (Wed Jul 09 2003 - 06:03:35 EDT)
[Snort-sigs] P2P Kazaa Traffic Sam Evans (Wed Jul 09 2003 - 10:31:33 EDT)
[Snort-sigs] ACID Esler, Joel Contractor (Wed Jul 09 2003 - 08:01:26 EDT)
[Snort-sigs] question about content karim hassib (Wed Jul 09 2003 - 01:28:29 EDT)
RE: [Snort-sigs] Questions about Snort Alerts Steven Alexander (Tue Jul 08 2003 - 19:25:42 EDT)
RE: [Snort-sigs] Rule management Eric Hines (Tue Jul 08 2003 - 19:08:42 EDT)
Re: [Snort-sigs] 10 documented Signatures daniel uriah clemens (Tue Jul 08 2003 - 13:17:38 EDT)
[Snort-sigs] P2P foldershare.com going to http traffic without a GET daniel uriah clemens (Tue Jul 08 2003 - 12:47:39 EDT)
[Snort-sigs] P2P foldershare.com ftp connection with FTP STUFF daniel uriah clemens (Tue Jul 08 2003 - 12:28:05 EDT)
[Snort-sigs] GATOR CLIENT GET exe file + Precision Time daniel uriah clemens (Tue Jul 08 2003 - 11:55:16 EDT)
[Snort-sigs] P2P foldershare.com 8000 connection daniel uriah clemens (Tue Jul 08 2003 - 12:17:40 EDT)
Re: [Snort-sigs] P2P rate limiting Chris Green (Tue Jul 08 2003 - 17:13:36 EDT)
[Snort-sigs] OUTGOING GENERIC GATOR CLIENT CONNECTION VIA HTTP POST + .dll daniel uriah clemens (Tue Jul 08 2003 - 11:55:37 EDT)
[Snort-sigs] Gator Client GET zip file daniel uriah clemens (Tue Jul 08 2003 - 11:54:37 EDT)
[Snort-sigs] GATOR.COM (GATOR/4.0) CLIENT AUTOUPDATE POST daniel uriah clemens (Tue Jul 08 2003 - 11:55:30 EDT)
[Snort-sigs] Generic Gator client GET Rule daniel uriah clemens (Tue Jul 08 2003 - 11:54:29 EDT)
[Snort-sigs] Gator.com Client HTTP GET w/ BLAST THREAD daniel uriah clemens (Tue Jul 08 2003 - 11:55:02 EDT)
[Snort-sigs] Gator client (Gator/4.0) POST + bannerserver.dll daniel uriah clemens (Tue Jul 08 2003 - 11:55:23 EDT)
[Snort-sigs] GATOR.COM CLIENT Generic AutoUPDATE POST daniel uriah clemens (Tue Jul 08 2003 - 11:55:42 EDT)
[Snort-sigs] Generic Gator Client Post rule daniel uriah clemens (Tue Jul 08 2003 - 11:54:46 EDT)
[Snort-sigs] Gator client connection via HTTP GET Precision Time - ini file daniel uriah clemens (Tue Jul 08 2003 - 11:55:10 EDT)
[Snort-sigs] Gator.com Client GET w/Date Manager daniel uriah clemens (Tue Jul 08 2003 - 11:54:55 EDT)
[Snort-sigs] 10 documented Signatures Babbin, Jacob Mr NSS-P (Thu Jul 03 2003 - 16:51:07 EDT)
[Snort-sigs] P2P rate limiting Sewell, Michael K (Thu Jul 03 2003 - 20:56:35 EDT)
[Snort-sigs] Questions about Snort Alerts eric (Sat Jul 05 2003 - 00:52:20 EDT)
[Snort-sigs] Rule management tim (Sun Jul 06 2003 - 12:10:18 EDT)
Re: [Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Chris Green (Tue Jul 08 2003 - 16:15:03 EDT)
Re: [Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Dale L. Handy (Tue Jul 08 2003 - 11:17:29 EDT)
[Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Ôø Ð¡Á¢ (Mon Jul 07 2003 - 21:12:13 EDT)
Re: [Snort-sigs] capturing and inspecting an email! Brian (Mon Jul 07 2003 - 18:33:37 EDT)
Re: [Snort-sigs] Question about rule semantic stephane (Mon Jul 07 2003 - 17:44:54 EDT)
[Snort-sigs] speedera rule Bryan Irvine (Mon Jul 07 2003 - 14:35:32 EDT)
[Snort-sigs] sigs admin Tim (Sun Jul 06 2003 - 13:18:30 EDT)
[Snort-sigs] capturing and inspecting an email! Héroux, Christian (Fri Jul 04 2003 - 18:09:57 EDT)
[Snort-sigs] 10 more snort signatures documented. Babbin, Jacob Mr NSS-P (Thu Jul 03 2003 - 19:32:36 EDT)
Re: [Snort-sigs] WEB-CGI admin.pl access Erick Mechler (Thu Jul 03 2003 - 11:24:49 EDT)
[Snort-sigs] WEB-CGI admin.pl access Chaudhury, Neel (Thu Jul 03 2003 - 08:22:26 EDT)
[Snort-sigs] WEB-CGI admin.pl access Chaudhury, Neel (Thu Jul 03 2003 - 08:16:18 EDT)
Re: [Snort-sigs] Gator spyware detection daniel uriah clemens (Wed Jul 02 2003 - 06:33:21 EDT)
[Snort-sigs] Gator spyware detection Esler, Joel Contractor (Wed Jul 02 2003 - 10:51:05 EDT)
[Snort-sigs] SID 1836, 1837 should include more ports Raffael Marty (Tue Jul 01 2003 - 17:35:58 EDT)
[Snort-sigs] What does this mean? Michael Breton (Tue Jul 01 2003 - 12:31:28 EDT)
[Snort-sigs] error in rules 1377 & 1378 ? stephane (Tue Jul 01 2003 - 15:35:21 EDT)
[Snort-sigs] Do not use snort-<list>-admin for general list postings Chris Green (Tue Jul 01 2003 - 15:37:17 EDT)
Re: [Snort-sigs] What does this mean? Dale L. Handy (Tue Jul 01 2003 - 13:34:42 EDT)
Re: [Snort-sigs] What does this mean? Erek Adams (Tue Jul 01 2003 - 13:26:10 EDT)
[Snort-sigs] What does this mean? Michael Breton (Tue Jul 01 2003 - 12:48:05 EDT)
Re: Antwort: [Snort-sigs] Rules Ali BASEL (Tue Jul 01 2003 - 10:21:02 EDT)
Antwort: [Snort-sigs] Rules m.stiefenhofer(at)ecofis.de (Tue Jul 01 2003 - 09:56:32 EDT)
Re: [Snort-sigs] Rules Mathias Gygax (Tue Jul 01 2003 - 09:24:21 EDT)
[Snort-sigs] Rules Vanio Rogerio Santos (Tue Jul 01 2003 - 08:54:55 EDT)
[Snort-sigs] snort-rules CURRENT update @ Tue Jul 1 01:22:21 2003 bmc(at)snort.org (Tue Jul 01 2003 - 01:22:21 EDT)
[Snort-sigs] snort-rules STABLE update @ Tue Jul 1 01:22:21 2003 bmc(at)snort.org (Tue Jul 01 2003 - 01:22:21 EDT)

237 messages sort by: [ author ] [ date ] [ subject ] [ attachment ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT